How to Update VMware Carbon Black Cloud Endpoint

This article describes how to update the VMware Carbon Black Cloud Endpoint sensor.

Affected Products:

• VMware Carbon Black Cloud Endpoint

Affected Operating Systems:

• Windows
• Mac
• Linux

An administrator may update the VMware Carbon Black Cloud Endpoint sensor using either the Carbon Black Cloud Console or from an endpoint with the Installer Package. Click the appropriate method for more information.

Carbon Black Cloud Console

1. In a web browser, go to <REGION>.conferdeploy.net.
   Note: <REGION> = Region of tenant

   • Americas = https://defense-prod05.conferdeploy.net/
   • Europe = https://defense-eu.conferdeploy.net/
   • Asia Pacific = https://defense-prodnrt.conferdeploy.net/
   • Australia and New Zealand = https://defense-prodsyd.conferdeploy.net/
2. Sign In to the VMware Carbon Black Cloud.
   
3. In the left menu pane, select Inventory and then click Endpoints.
   
4. Search for the endpoints to update either by name or by using the available filters.
   
5. Select one or more endpoints to update.
   
6. Click Take Action and then select Update sensors.
   
7. In the Update Sensors dialog box, select to either update sensors on the selected assets or all assets.
   
8. For each Platform, specify a target version for the sensors.
   
9. Add a unique Sensor update name and then click Update Sensors.
   
   Note: While most updates do not require a reboot, there is always the possibility that some major changes require endpoints to reboot.
10. To check the progress of the update, go to Inventory, click Endpoints, and then select the Sensor Update Status tab.
    
    Note: To interrupt an update, click the Stop button under Action.
11. Optionally, once the update is completed, a CSV containing details may be exported by clicking the Export option in the Actions menu.
    
    Note: The update process in the VMware Carbon Black Cloud console can take between two to four hours depending on device usage.

Installer Package

The VMware Carbon Black Cloud sensor may be updated by running the new installer package directly on the endpoints. An administrator must first download the installer package, then the administrator must run the installer package either through the UI or the CLI. Click the appropriate method for more information.

UI

The VMware Carbon Black Cloud Endpoint sensor can be updated through the UI on Windows, macOS, or Ubuntu. Click the appropriate operating system for more information.

Windows

1. Connect to the endpoint that requires an update with a user that has local admin rights.
2. Locate and then double-click the installer package.
   
   Note: The filename of the installer package may differ from the example image.
3. Click Next.
   
4. Select I Accept the terms in the License Agreement and then click Next.
   
5. Click Install.
   
6. Once the update is complete, click Finish.
7. To confirm that the new version is installed, right-click the VMware Carbon Black Cloud icon in the Windows system tray and then select About.
   
8. Record the Version.
   
   Note: The version of the client may differ from the above screenshot.

macOS

1. Connect to the endpoint that requires an update with a user that has local admin rights.
2. Locate and then double-click the installer package.
   
   Note: The filename of the installer package may differ from the example image.
3. Double-click CbCloud Install.
   
4. Click Allow.
   
5. Click Continue.
   
6. Click Continue and then Agree to the terms of the license agreement.
   
7. Click Install.
   
8. Insert the credentials of a user with admin rights and then click Install Software.
   
9. A notification appears that says that the installer is trying to load a new extension. Once installation is complete, go to Privacy & Security in System Settings to enable the CB extension.
   
10. A notification appears that says that the installer is trying to load a new Network Content Filter. Click Allow.
    
11. Once the update is complete, click Close.
    
12. To confirm that the new version is installed, right-click the VMware Carbon Black Cloud icon in the upper left and then select About Carbon Black Cloud.
    
13. Record the Version.
    
    Note: The version of your client may differ from the above screenshot.

Ubuntu

1. Connect to the endpoint that requires an update with a user that has local admin rights.
2. Locate and then double-click the installer package.
   
   Note: The filename of the installer package may differ from the example image.
3. Double-click the DEB file.
   
   Note: The filename of the DEB file may differ from the example image.
4. Click Install.
   
5. Populate the Password of the connected user.
   
6. To confirm that the new version is installed and running, open a Terminal window, then type ps -A | grep cbagentd and press Enter.
   
7. From the same Terminal window, type sudo /opt/carbonblack/psc/bin/cbagentd -v and then press Enter.
   
8. Record the cbagentd version.
   
   Note: The version of the client may differ from the above screenshot.

CLI

The VMware Carbon Black Cloud sensor can be updated using the CLI in one of two ways. It can be updated either from the endpoints by running the installer package, or by pushing the command-line script through a centralized deployment tool on Windows, macOS, SUSE, or Ubuntu. Click the appropriate operating system for more information.

Windows

VMware Carbon Black Cloud allows flexibility in command-line installation options through the usage of switches.

To update the sensor by command line:

1. Log in to the endpoint with an administrative user.
2. As an administrator, right-click the Windows start menu and then click Run.
   
3. In the Run dialog box, type cmd and then click OK.
   
4. In Command Prompt, type msiexec /q /i <DIRECTORY>\installer_vista_win7_win8-<VERSION>.msi /L*vx <LOGDIRECTORY> and then press Enter.
   
   Note:

   • <DIRECTORY> = The path where the installer package resides
   • <VERSION> = The version in the installer package filename
   • <LOGDIRECTORY> = The path where the log directory is to be created
   • The paths and version in the example image may differ in your environment.
5. To confirm that the new version is installed, right-click the VMware Carbon Black Cloud icon in the Windows system tray and then select About.
   
6. Record the Version.
   
   Note: The version of your client may differ from the above screenshot.

macOS

1. Connect to the endpoint with a user that has local admin rights.
2. Double-click the installer package.
   
   Note: The version of the client may differ from the above screenshot.
3. Right-click the mounted image and then select New Terminal at Folder.
   
4. From Terminal, type sudo /usr/sbin/installer -verbose -pkg CBCloud\ Install.pkg -target / and then press Enter.
   
5. Populate the root password.
   
6. Upon completion of the update, close Terminal.
   
7. To confirm that the new version is installed, click the VMware Carbon Black icon in the upper-left part of the screen and then select About CB PSC.
   
8. Record the Version.
   
   Note: The version of your client may differ from the above screenshot.

SUSE

1. Connect to the endpoint with a user that has local admin rights.
2. Double-click the new installer package to extract it.
   
3. In the Ark dialog box, click Extract and then select Extract To.
   
4. Select a destination for the extracted files and then click Extract.
   
5. Select the extracted tar.uncompressed file and then repeat Steps 1 through 4 to extract it.
   
6. Double-click the extracted folder and confirm the presence of the RPM file.
   
7. Open Terminal.
8. Type sudo rpm -U <DIRECTORY>/cb-psc-sensor-<VERSION>.x86_64.rpm and then press Enter.
   
   Note:

   • <DIRECTORY> = The path where the installer package resides
   • <VERSION> = The version in the installer package filename
   • The paths and version in the example image may differ in your environment.
9. To confirm that the new version is installed and running, open Terminal, type ps -A | grep cbagentd and then press Enter.
   
10. From the same Terminal window, type sudo /opt/carbonblack/psc/bin/cbagentd -v and then press Enter. If prompted, insert the root password.
    
11. Record the cbagentd version.
    
    Note: The version of the client may differ from the above screenshot.

Ubuntu

1. Connect to the endpoint with a user that has local admin rights.
2. Locate, then right-click the installer package and then select Extract to.
   
3. From the dialog box, select a destination folder for the extracted files and then click Select.
   
4. Open Terminal.
5. Type sudo dpkg -i '<DIRECTORY>/cb-psc-sensor-<VERSION>.x86_64.deb' and then press Enter.
   
   Note:

   • <DIRECTORY> = The path where the installer package resides
   • <VERSION> = The version in the installer package filename
   • The paths and version in the example image may differ in your environment.
   • One way to write the command is to drag the .deb file into the Terminal window at the beginning of the sudo dpkg -i command.
6. Populate the password for the connected user when prompted.
   
7. Upon completion of the update, close Terminal.
   
8. To confirm that the new version is installed and running, open Terminal, then type ps -A | grep cbagentd and press Enter.
   
9. From the same Terminal window, type sudo /opt/carbonblack/psc/bin/cbagentd -v and then press Enter. If prompted, insert the root password.
   
10. Record the cbagentd version.
    
    Note: The version of the client may differ from the above screenshot.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.